feat: verify users email (#215)

* worked on the email verification

* worked on the email verification

* fixed the emailing issue and the supabase updating issue

* chore: add timer to resend, add supabase.server, enforce unique email

* chore: remove nodemailer logger

* remove async

* remove disposable email verification

---------

Co-authored-by: Rotimi Best <best@classroomio.com>

apps/dashboard/src/routes/api/email/verify_email/+server.js

@@ -0,0 +1,55 @@
+import { json } from '@sveltejs/kit';
+import { getSupabase } from '$lib/utils/functions/supabase';
+import sendEmail from '$defer/sendEmail';
+
+const supabase = getSupabase();
+
+export async function POST({ request }) {
+  const { to, profileId, orgSiteName } = await request.json();
+  const accessToken = request.headers.get('Authorization');
+  console.log('/POST api/email/verify_email', to, profileId);
+
+  if (!to || !profileId || !accessToken) {
+    return json({ success: false, message: 'Name and To are required fields' }, { status: 400 });
+  }
+
+  let user;
+  try {
+    const { data } = await supabase.auth.getUser(accessToken);
+    user = data.user;
+  } catch (error) {
+    console.error(error);
+  }
+
+  if (!user) {
+    return json({ success: false, message: 'Unauthenticated user' }, { status: 401 });
+  }
+
+  const origin = request.headers.get('origin');
+  const verificationData = JSON.stringify({
+    profileId,
+    orgSiteName
+  });
+
+  const verificationLink = `${origin}/api/verify?data=${encodeURIComponent(
+    btoa(verificationData)
+  )}`;
+
+  await sendEmail({
+    to,
+    subject: '[ClassroomIO]: Verify your email',
+    content: `
+    <p>Thank you for signing up</p>
+    <p>To verify your email, please click the <strong>Verify</strong> button below /p>
+    <div>
+    <a class="button" href="${verificationLink}">Verify</a>
+  </div>
+    `,
+    isPersonalEmail: true
+  });
+
+  return json({
+    success: true,
+    message: `Email sent ${verificationLink}`
+  });
+}

apps/dashboard/src/routes/api/verify/+server.js

@@ -0,0 +1,29 @@
+import { redirect, json } from '@sveltejs/kit';
+import { getServerSupabase } from '$lib/utils/functions/supabase.server';
+
+export const GET = async ({ url }) => {
+  const supabase = getServerSupabase();
+
+  const data = url.searchParams.get('data');
+  if (!data) return json({ message: 'data is not found' }, { status: 404 });
+
+  const hashData = decodeURIComponent(data);
+  console.log('hashData', hashData);
+
+  const decodedData = atob(hashData);
+  console.log('decodedData', decodedData);
+
+  const { profileId, orgSiteName } = JSON.parse(decodedData);
+
+  const { error } = await supabase
+    .from('profile')
+    .update({ is_email_verified: true, verified_at: new Date().toDateString() })
+    .match({ id: profileId });
+
+  if (error) {
+    console.log('profile not found', error);
+    throw redirect(307, '/404');
+  }
+
+  throw redirect(307, `/org/${orgSiteName}?welcomePopup=true`);
+};